On 9/19/06, Robin Landis <[EMAIL PROTECTED]> wrote:
sudo -s opens a root level shell that can be used to issue multiple commands. If running in a gui, the admin could even have more than one shell open and use the root and non-root shells simultaneously for appropriate commands. That's pretty simple and requires knowledge of only the user's own password. The only command logged is the command to spawn the shell, not the commands issued in that shell, unlike the audit trail that could be kept if commands were issued separately prefixed with sudo.
One option that I've used to log these commands is sudosh (http://sourceforge.net/projects/sudosh/). It acts as a login shell, but logs all commands/keystrokes and allows easy playback/review of them for auditing. Keith Bucher
